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FIELD OF THE INVENTION 

The present invention relates to information aggregation systems, and more 
particularly to methods of aggregating secure information and presenting aggregated 
Internet account information on a computer screen or a wireless device in a format that is 
easy to read and that can be readily modified to meet the needs and interests of individual 
users of the system. The present invention also relates to Internet systems providing 
secure access to information from various sources and sharing of personal information 
securely between its users. 

BACKGROUND OF THE INVENTION 

In the past year or so, a small number of Internet service providers have begun to 
provide certain information aggregation services. In the Internet context, information 
aggregation refers to the process of gathering data and other information from selected 
web sites and displaying the data on users' personal computers (PC's) and wireless 
devices. Although the development of Internet information aggregation systems is still in 



its infancy, the number of service providers offering information aggregation services is 
beginning to grow. 

A successful information aggregation system must overcome a number of 
difficulties associated with operating in an Internet environment. Such difficulties 
5 include: accessing and retrieving data from a variety of diverse web-sites; accessing and 
retrieving secure data from a variety of secure web-sites; updating data on a timely basis; 
displaying data in a useful and user friendly format; maintaining the confidentiality of 
client data through encryption and decryption; organizing and maintaining large amounts 
of data; accurately and rapidly retrieving stored data; and updating and maintaining user 

10 account information. 

A key feature of information aggregation systems is the ability to carry out 
Programmatic Data Extraction ("PDE"). In the context of Internet information 
aggregation systems, PDE refers to a process by which a host information aggregation 
server mimics the login characteristics of a client and, once logged onto an institute or 

15 web site, picks up needed information from the institute or web site. In essence, the host 
server makes institutes/web-sites believe that the host server is the client, thus enabling 
the host server to retrieve the client's secure data. The host server can then display the 
secure data for the user in the host server's information aggregation system. 

Existing Internet information aggregation systems do not provide a function that 

20 permits online interactive sharing of financial and non-financial account information 
(emails, rewards etc.) as well as other personal information (like personal profile, medical 
records etc.) among users of the system. On existing systems, a user located in one 
location who has aggregated certain information ("grantor") is unable to assign the right 
to other users ("grantees") to view his or her personal information on grantee's computer. 

25 Likewise, a grantee located in one location is unable to view the grantor's information on 
his or her computer. The ability to selectively and easily share online aggregated personal 
information securely would significantly expand the uses and functionality of Internet 
information aggregations systems. However, in order to preserve the security of account 
information, the account sharing system must implement sufficient security measures. 

30 For example, grantors and grantees should not be required to disclose their login IDs and 
passwords to one another in order to share account information. The information should 
not be emailed or sent out unsecurely to each other. Additionally, the account sharing 
system should preferably be easy to use. For example, a grantor should be able to readily 
assign or revoke sharing privileges to his or her grantees. The grantor and grantees 
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should also preferably be able to access shared information through various media like 
the Internet, mobile phones, PDA and other wireless handheld devices. 

Internet based email and other messaging services, which allow users to exchange 
messages in real time, have become very common. E.g. MSN Messenger, AOL Instant 
5 Messenger. But these messages are not secure and can be easily intercepted by third 
parties, without the sender and recipient being aware of the interception. The availability 
of a messaging system that can be used to exchange messages securely between two or 
more users can resolve this problem. Through the new mechanism described herein, users 
will be able to send messages securely to selected recipients. 

10 Multi-column layouts for displaying information and data have been around for 

many years. For example, newspapers typically use a three-column layout. Multi-column 
layouts are also used in data tables and in accounting systems. Web pages of Internet web 
sites frequently employ multi column layouts in a fixed format. See e.g. www.cnn.com. 
However, up to now, such web sites have not provided a simple means for altering the 

15 location and appearance of the information contained in the three-column layout to each 
user. Additionally, no one other than applicant has employed a multi column (e.g. three 
column) display layout in an Internet information aggregation system (for an example of 
applicant's three column layout. See Figure 2 or visit www.umonitor . com ) . Applicant's 
system allows users to design various views with multi column layouts to create sets of 

20 information that can be shared with other users. 

The applicant is a leading developer of information aggregation software, and has 
pioneered many of the innovations that are presently appearing on the Internet 
information aggregation market. The inventors have identified various problems 
associated with information aggregation systems, and have invented a system that is easy 

25 to read, use, and modify. There is thus a need for an information aggregation system 
having the following described characteristics and advantages over the prior art. 

OBJECTS AND SUMMARY OF THE INVENTION 

It is an object of the invention to provide an Internet information aggregation 
30 system that allows selective sharing of account information among users of the system. 

It is another object of the invention to provide an Internet information aggregation 
system in which a user located in one location is able to view the personal information of 
other users on his or her computer or wireless devices. 

It is another object of the invention to provide an Internet information aggregation 
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system in which a user located in one location can selectively assign and revoke the right 
to other users to view his or her personal information. 

It is another object of the invention to provide an Internet information aggregation 
system that allows selective sharing of account information among users of the system 
5 while providing security features that preserve the security and confidentiality of users' 
personal information. 

It is yet another object of the invention to facilitate and promote selective sharing 
of account information among users of an Internet information aggregation system by 
providing an account sharing function that is easy to use. 
10 It is still another object of the invention to provide an account sharing function for 

an Internet information aggregation system that allows a user to select multiple levels of 
access when assigning sharing privileges to other users. This feature allows users to 
perform different functions on shared information. 

It is also an object of the invention to provide a secure mechanism for the users 
15 sharing each other's information to securely communicate with each other using secure 
messages. 

These and other objects and advantages of the invention shall become apparent 
from the following general and preferred description of the invention. 

Accordingly, a computerized method of providing and allowing secure selective 

20 sharing of account information between users of an Internet information aggregation 
system is provided comprising the following. A grantor user creates one or more view 
pages, each of the view pages having a plurality of monitors therein. A unique visitation 
access code is assigned to each of a plurality of grantee users of the Internet information 
aggregation system. The grantor selectively obtains the visitation access codes from one 

25 or more of the grantees, and uses the visitation access codes to selectively grant visitation 
access to one or more of the grantor's view pages to one or more of the grantees. The 
grantor may also selectively revoke visitation access privileges to one or more of the 
grantees. The grantor's view pages preferably include a public view that displays non- 
sensitive information, a private view that displays sensitive information, and an advisor 

30 view that displays selected account information pertaining to obtaining advice from an 
advisor, such as a financial, health, or travel advisor. 

Using the visitation access codes to selectively grant visitation access to one or 
more of the grantor's view pages to one or more of the grantees preferably comprises the 
following. The system receives input from the grantor for granting visitation access, and 
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then verifies that the grantor is authorized to grant visitation access. If the grantor is 
authorized to grant visitation access, the system presents a graphical user interface for 
granting visitation access. The system receives input from the grantor for a visitation 
access code of a selected grantee, and then determines whether the grantor entered a 
5 correct visitation access code. If the grantor entered a correct visitation access code, the 
system displays a list of the grantor's available view pages. The system then receives 
input from the grantor for selectively granting access to one or more of the grantor's view 
pages to the selected grantee. The grantor, in selectively granting access to one or more 
of the grantor's view pages, preferably can selectively assign one of three levels of access 

10 for each the view page for which access is granted. The three levels are: Read Access, 
Refresh Access, and Full Access. 

When a grantee logs onto the Internet information aggregation system via a 
processor, such as a computer or a mobile device, the system displays one of the 
grantee's view pages on a display of the grantee's processor. The display includes an 

15 option for selectively viewing view pages of grantors who have granted visitation access 
to the grantee. When the grantee user selects one of the grantors' view pages, the system 
displays the selected grantor's view page on the grantee user's display. In displaying the 
selected grantor's view page on the grantee user's display, the system preferably retrieves 
the selected grantor's view from a visitation access view store database, retrieves the 

20 grantor's decryption and encryption keys from a grantor decryption and encryption keys 
database, retrieves the grantee's decryption and encryption keys from a reviewer 
decryption and encryption keys database, and retrieves the grantor's visitation access 
permissions from a grantor permissions database. The system then utilizes the grantor's 
decryption and encryption keys, the grantee user's decryption and encryption keys, and 

25 the grantor's visitation access permissions to display the selected grantor's view page on 
the grantee user's display. 

The system determines whether the grantee has been granted a right to Read 
Access, Refresh Access, or Full Access, and limits the grantee's use of the selected 
grantor's view page to the granted right of access. In determining whether the grantee has 

30 been granted Read Access, Refresh Access, or Full Access, the system preferably first 
determines whether the grantee user has been granted Read Access. If the grantee has 
been granted Read Access, the system retrieves the selected grantor's view page, displays 
the selected grantor's view page on the grantee's display, and permits the grantee user to 
view the view page in a read-only mode. If the grantee has not been limited only to Read 
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Access, the system then determines whether the grantee has been granted Refresh Access. 
If the grantee has been granted Refresh Access, the system retrieves the selected host 
user's view page, displays the selected grantor's view on the grantee's display, and 
enables the grantee user to selectively refresh selected information on the selected 
grantor's view page. However, if the grantee has not been limited only to Read Access or 
Refresh Access, the system retrieves the selected grantor's view page, displays the 
selected grantor's view on the grantee's display, enables the grantee user to selectively 
refresh selected information on the selected grantor's view page, and further enables the 
grantee user to carry out functions on the grantor's view page as though the grantee user 
were the grantor. For example, the grantee can carry out transactions, log in to selected 
web-sites, and modify the grantor's account information as though the grantee were the 
grantor. 

BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 is a block diagram showing an overview of an Internet based system that 
incorporates the information aggregation system of the invention. 

Figure 2 is a preferred embodiment of a graphical user interface of a view page of 
the information aggregation system of the invention. 

Figure 3 is a preferred embodiment of a graphical user interface of an add view 
page of the information aggregation system of the invention. 

Figure 4 is a preferred embodiment of a graphical user interface of a modify view 
page of the information aggregation system of the invention. 

Figures 5A-5J are preferred embodiments of graphical user interfaces of pages for 
editing monitors. 

Figures 6A-6C are a flow chart of one preferred embodiment of a routine for 
changing a layout of an information aggregation program. 

Figures 7A-7B are a flow chart of a preferred embodiment of a routine for 
displaying a view page in a three-column layout. 

Figures 8A-8B are a flow chart of one preferred embodiment of a routine for 
populating a monitor. 

Figure 9 is a flow chart of one preferred embodiment of a routine for modifying 
passwords. 

Figure 10 is a flow chart of one preferred embodiment of a routine for getting data 
from a web-site. 



Figures 1 1 A-l 1C are a flow chart of one preferred embodiment of a routine for 

PDE. 

Figures 12A-12B are a flow chart of one preferred embodiment of a routine for a 
fast access or auto-login feature of the invention. 
5 Figures 13A-13C are a flow chart of one preferred embodiment of a routine for 

providing access to the system through mobile devices such as phones, pagers and the 
like. 

Figure 14 is a is a preferred embodiment of a graphical user interface for granting 
and revoking visitation access rights for sharing account information on an Internet 
10 information aggregation system. 

Figures 15A-15E are a flow chart of a preferred embodiment of a routine for 
providing selective sharing of personal information among users of an Internet 
information aggregation system. 

Figure 15B is a flow chart of a preferred embodiment of a routine for creating and 
15 changing view pages for use in selective sharing of personal information among users of 
an Internet information aggregation system. 

Figure 15C is a flow chart of a preferred embodiment of a routine for granting 
visitation access to users in a system for selective sharing of personal information among 
users of an Internet information aggregation system. 
20 Figure 15D is a flow chart of a preferred embodiment of a routine for revoking 

access to users in a system for selective sharing of personal information among users of 
an Internet information aggregation system. 

Figure 15E is a flow chart of a preferred embodiment of a routine for reviewing 
views in a system for selective sharing of personal information among users of an 
25 Internet information aggregation system. 

Figure 15F is a flowchart of a preferred embodiment of a routine for providing 
selective sharing of personal information among users of an Internet information 
aggregation system using various mobile and handheld devices. 

Figure 15G is a flow chart of a preferred embodiment of a routine for providing 
30 secure message exchange between users of an Internet information aggregation system. 

PREFERRED EMBODIMENTS OF THE INVENTION 

In the following detailed description of the preferred embodiments, reference is 
made to the accompanying drawings, which form a part hereof, and in which are shown 
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by way of illustration specific embodiments in which the invention may be practiced. It is 
to be understood that other embodiments may be utilized and structural changes may be 
made without departing from the scope of the present invention. 

The present invention is directed to the embodiments shown in Figures 14 and 15 
and described in Section L below. The invention is used in an account aggregation 
system, such as the preferred account aggregation system shown in Figures 1-13 and 
described in sections A-K below. 

A. System Overview 

As shown in Figure 1, the invention is used on conventional Internet web-site 
platforms. All functions of the system are performed from a web interface where a user or 
client comes to the information aggregation system of the invention site using a browser 
like Internet Explorer 5.0 or Navigator 4.x. A computer, such as a personal computer 
(PC) or mainframe, serves as the host server 1010. The host server 1010 is programmed 
to carry out the functions described in further detail below. A database server 1020 is 
associated with the host server 1010. The host server 1010 is connected to the Internet via 
a means known in the art such as through a modem to a telephone or ISDN line. A user or 
client 1030 logs onto the host server 1010 via the Internet, typically through a 
conventional Internet service provider (ISP) 1040. The user logs onto the host server 
1010 using a user identification number ("user ID") and a password, using a secure 
network connection. Once the user is logged onto the host server 1010, the user can view 
and process aggregated account information in the manner described below. The 
inventive program routines described below provide the user with numerous options for 
customizing the layout and functionality of the information aggregation system. The user 
interfaces of the invention employ conventional point-and-click display and selection 
components, such as the type presently used on the Microsoft Windows and Macintosh 
operating systems. A user or client with a cell phone 1050, a pager 1060 or PDA 1070 
logs on to the server through a wireless network using a user ID and password. The host 
server 1010 provides desired information in a format suitable to the client's mobile 
device (i.e. cell phone, pager, or PDA). Preferred embodiments of the information 
aggregation system of the invention can be viewed at www.umonitor.com. 

B. User Interface 

Figure 2 shows a preferred embodiment of a "view" page 20 used in the 
information aggregation system of the invention. After the user successfully logs onto the 



host server 1010, view page 20 is displayed on the display monitor of the user's computer 
1030. The view page 20 functions as a graphical user interface (GUI). The view page 20 
allows the user to modify the information aggregation system by simply pointing and 
clicking on various options and pull-down menus, in the manner described below. 
5 As shown in Figure 2, the home page view 20 preferably has three columns 1, 2, 

3, The preferred three column layout shown in Figure 2 allows all or nearly all of the 
desired aggregated information to be displayed at one time on the screen of a 
conventional computer display screen or monitor 1030, minimizing or eliminating the 
necessity of scrolling left-right on the display screen, clicking on various links, or going 

10 to different pages. One or more monitors 10 are displayed in each of the columns 1, 2, 3. 
In Figure 2, column 1 includes a finance monitor, a credit card monitor, and a bills 
monitor. Column 2 includes an e-mail monitor, a package monitor, a flight monitor, and a 
life style monitor. Column 3 includes a market monitor, a rewards monitor, and a weather 
monitor. As will be discussed in further detail below, the system allows the user to 

15 populate, format, move, add, and delete monitors and rearrange them as convenient. 
Although a three-column layout is preferred, any number of columns, from 1 to n, can be 
used in the system. 

The three-column layout is displayed on the user's display 1030 using 

conventional computer graphics interfacing. However, the system of the invention allows 
20 each user great flexibility in modifying the view page 20 and in creating multiple view 

pages 20. The view page 20 can modified using simple and readily understood point and 

click functions, in the manner described below. 

A user can access most of the software routines by selecting the "Options" feature 

110 from the view page 20. When the user selects options 110, he or she will be 
25 presented with a pull-down menu. The pull-down menu preferably contains the following 

selections; Change Layout; Add/Delete Views; Change Password; Update Profile; 

Change Mobile Password; and Mobile Access. Each of these functions is described 

below. 

The view selection icon 103 provides a pull-down menu containing a list 
30 of the user's various view pages 20. The user interface of the view page 20 also 
preferably includes a search box 60 for entering search queries and an adjacent pull-down 
menu of web search engines 62. The link box 64 preferably includes a pull down window 
of "My Favorites" for fast access to favorite sites. 
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The view page 20 and all other pages of the system are displayed on the user's 
browser (e.g. Netscape Navigator; Microsoft Internet Explorer) using a secure 
connection. While displaying the view page 20, the viewer can access the various 
functions provided by the browser, such as Forward, Back, Print, Favorites, and the like. 
The user can enter an address on the web address bar of the browser in order to surf the 
web, and can then return to the information aggregation system as desired. If the user 
leaves the information aggregation system during this process, the user will have to login 
again. For wireless devices such as cell phones, pagers, and PDAs, information is 
organized in a hierarchical one-column view to accommodate size limitations of display 
and difficulty in data entry for navigation from a small keypad or stylus. This optimized 
presentation gives more useful information with the least amount of user interaction. 

C. Create View Page 

The information aggregation system of the invention allows a user to readily 
create multiple view pages 20. A new view page 20 is created by selecting "Add/Delete 
Views" from the "Options" feature 110 of the view page 20. Upon selecting "Add/Delete 
Views," the user will be presented with a GUI such as the preferred embodiment shown 
in Figure 3. When the user clicks on the "Create View" link 109 shown in Figure 3, the 
software automatically creates a new view page 20. In a preferred embodiment, the 
software automatically populates the newly created view page 20 with each of the types 
of available monitors 10 (e.g. Finance Monitor, Bills Monitor, etc.), i.e. the software 
creates a default view page 20. The user can then populate, delete or add monitors 10 to 
the view page 20 in the manner described below. The user can delete an existing view 
page 20 by simply clicking on the delete link 111. 

The user can create a plurality of view pages 20 using the above procedure, and 
can assign a different name to each view page (e.g. "My View," "My View 2"). The 
user's various views 20 are stored in and retrieved from database 112. When the user 
desires to switch to a different view, the user clicks on the view selection icon 103 in 
Figure 2. Once a particular view page 20 has been selected using the view selection icon 
103, the selected view page 20 can be modified by selecting Change Layout from the 
options pull-down menu 1 1 0, in the manner described below. 

D. Modify View Page Layout 

Figure 6 is a high-level flow chart for one embodiment of a method which 
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implements the change layout functions of the information aggregation system. When a 
user desires to modify a layout of a view page 20, the user first selects the desired view 
page 20 using link 103, in the manner described above. In order to modify the selected 
view page 20, the user accesses the process of Figure 6 by selecting "Change Layout" 
from the "Options" link 110 of the view page 20. Alternatively, the user can access the 
routine of Figure 6 by selecting the "Edit/Rename" link 1 10 from the "Create View" GUI 
shown in Figure 3. After completing either of these procedures, the user will be presented 
with a GUI such as the preferred embodiment shown in Figure 4. 

1 . Arrange Monitors 

Monitors 10 may be arranged on the view page 20 by the process described in 
blocks 120-126 of Figure 6. The GUI of Figure 4 includes a three column chart 1 14 that 
lists all the monitors 10 in the sequence and position in which they appear on the view 
page 20. The software retrieves the existing characteristics of the monitors 20 (i.e. 
section, position, color scheme etc.) of the selected view page 20 from database 116. 

Referring to the flow chart of Figure 6, the software receives input from a user at 
block 114 for selection of a monitor 10. In the GUI of Figure 4, selection of the monitor 
10 is accomplished by simply pointing to the name of the monitor 10 on chart 1 14 and 
then clicking the monitor 10; this step corresponds to block 122 of the flowchart of 
Figure 6. In block 124, the software enables the user to move the monitor 10 to a desired 
location on the view page 20. Referring back to the GUI of Figure 4, once a monitor 10 
has been selected in the step of block 122, the user can move or delete the monitor 10 by 
using the selection bar 124. The selection bar 124 includes selections for left, up, delete, 
down, and right. By simply pointing and clicking on one of the selections on the selection 
bar 124, the user can move the selected monitor 10 on the view page 20. For example, if 
the user selected "Finance Monitor" from column 1 of chart 1 14 and then clicked once on 
the "right" button on selection bar 124, the Finance Monitor 10 would move from column 
1 to column 2. If the user clicked the "right" button of the selection bar 124 a second 
time, the Finance Monitor 10 would move from column 2 to column 3. From column 3, 
the user could click the "left" button of the selection bar 124 to return the Finance 
Monitor 10 to column 2. If the user clicked the "down" button on selection bar 124, the 
Finance Monitor 10 would move one spot down on the column. Similarly, if the user 
clicked the "up" button on the selection bar 124, the Finance Monitor 10 would move one 
spot up the column. If the user clicked the delete button on selection bar 124, the Finance 



Monitor would be deleted from the view page 20. 

As indicated in block 126, the user may repeat the foregoing process until the user 
is satisfied with the arrangement of the monitors 10 on view page 20. Once the user is 
satisfied with the selection and position of the various monitors 10 on the view page 20, 
5 the user can click the finish icon 230, which will return the user to the GUI shown in 
Figure 2. Alternatively, the user may elect to add or modify additional monitors, in the 
manner described below. 

2. Add New Monitors 

10 New monitors 10 can be added to the view page by the process described in 

blocks 150-164 of the flowchart of Figure 6. Upon receiving input from the user as to the 
type of monitor to add (block 154), the software retrieves the selected monitor from the 
types of monitors database 152. Turning to the preferred GUI shown in Figure 4, link 154 
provides a pull-down menu of types of monitors available (i.e. Finance Monitor, Credit 

15 Card Monitor, Bills Monitor, etc.). The software provides a name for the selected monitor 
(block 156). For example, if the user selects "Finance Monitor" from the pull-down menu 
154 of Figure 4, the words "Finance Monitor" appear in box 156 on the display screen. 
The user can then edit the name of the selected monitor by clicking on box 156 and 
typing in a desired name. 

20 The user may also elect to change the color of the title background and the body 

background of the display of the monitor 10 (see block 158). Turning to the preferred 
GUI shown in Figure 4, the "Title Background Color" box 158 and the "Body 
Background Color" box 160 allow a user to select the color of the display for each 
selected monitor 10 by simply clicking on one of an array of available colors. The GUI 

25 also preferably includes a "Preview of Section" box 158B, 160B, which changes colors in 
accordance with the selections made in boxes 158 and 160, respectively, so that the user 
obtains a preview of what the selected colors will look like on the view page 20. 

Once the user is satisfied with the name and the color scheme of the new monitor 
10, the user clicks on the "Add" button 164, at which point the software stores the 

30 parameters of the new monitor 10 in the monitor database 116. The user can move the 
new monitor 10 on the view page 20 by repeating the procedure of blocks 120-126. The 
user can add another new monitor by simply repeating the procedure of steps 150-164. 
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3 . Modify Existing Monitors 
Existing monitors 10 can be modified by the process described in blocks 200-224 
of the flowchart of Figure 6. Upon receiving input from the user as to the type of monitor 
to modify (block 204), the software retrieves the selected monitor from the monitors 
5 database 116. Turning to the preferred GUI shown in Figure 4, link 204 provides a pull- 
down menu of the monitors 10 of the view page 20. The software retrieves the name of 
the selected monitor (block 212). For example, if the user selects "Finance Monitor" from 
the pull-down menu 204 of Figure 4, the words "Finance Monitor" appear in box 216 on 
the display screen. The user can then edit the name of the selected monitor 10 by clicking 

10 on box 216 and typing in a desired name. 

As shown in Figure 6, the user may also elect to change the color of the title 
background and the body background of the display of the monitor 10 (see block 208), in 
a procedure similar to that described above with regard to adding a new monitor. Turning 
to the preferred GUI shown in Figure 4, the "Title Background Color" box 208 and the 

15 "Body Background Color" box 210 allow a user to select the color of the display for each 
selected monitor 10 by simply clicking on one of an array of available colors. The GUI 
also preferably includes a "Preview of Section" box 158B, 160B, which changes colors in 
accordance with the selections made in boxes 208 and 210, respectively, so that the user 
obtains a preview of what the selected colors will look like on the view page 20. 

20 Once the user is satisfied with the name and the color scheme of the edited 

monitor 10, the user clicks on the "Update" button 226 (see Figure 4), at which point the 
software stores the parameters of the edited monitor 10 in the monitor database 116. The 
user can change all of the monitors to the selected color combination by clicking the 
"Update All" button 227. The user can move the edited monitor 10 on the view page 20 

25 by repeating the procedure of blocks 120-126. The user can edit other monitors by simply 
repeating the procedure of steps 204-224. 

When the user is finished moving, adding, deleting, and editing monitors, the user 
clicks on the "Finish" button 230. As shown in the flow chart of Figure 6, upon receiving 
the "finish" input 230, the software updates the parameters of the monitors 10 of the view 

30 page 20 and stores them in the monitor database 116. The software then displays the 
finished view page 20 on the display 1030 (see block 238). Figure 7 provides a high level 
flow chart of a preferred embodiment of software for carrying out the display function of 
block 238 of Figure 6 A. The software routine shown in Figure 7 calculates the width of 
the columns 1, 2, and 3. The software routine also preferably eliminates any column that 
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does not contain at least one monitor 10, thus increasing the width of the remaining 
columns. 

E. Populate Monitors 
5 Once a view page 20 has been set up in accordance with the foregoing steps, the 

user populates each monitor 10 of the view page 20 by inserting links to selected web- 
sites onto the monitor 10. Figure 8 is a flow chart of one preferred embodiment of a 
routine for populating a monitor. As shown in Figure 2, each monitor is provided with a 
"Modify" link 400. By clicking on the Modify button 400, the user initiates the software 

10 routine of Figure 8. 

Upon receiving input from a user at block 400 for selection of a monitor 10, the 
software retrieves data for the selected monitor 10 from database 404 (i.e. the 
institutes/web-sites that are already populating the monitor). Additionally, the software 
retrieves information on available institutes/web-sites for the selected monitor 10 from 

15 Institute Database 416. At block 412, the software displays the institutes/web-sites that 
are already populating the selected monitor 10, as well as the institutes/web-sites that the 
user can add to the selected monitor 10. Figures 5A-5J present preferred embodiments of 
GUI's for displaying the foregoing information. 

Upon receiving input from a user at block 408 for selection of an institute/web- 

20 site, the software prompts the user to enter the user's ID (block 420) and PIN/password 
(block 424) for the selected institute/web-site. The user is also asked to verify the 
PIN/password (block 428). The software accesses a user ID encryption key from database 
440, encrypts the user's ID for the selected institute/web-site 432, and stores the user's 
encrypted ID in database 436. Similarly, the software accesses a PIN/password 

25 encryption key from database 452, encrypts the user's PIN/password for the selected 
institute/web-site 456, and stores the user's PIN/password in database 448. If the user 
desires to populate the selected monitor 10 with additional institutes/web-sites, the 
software repeats the foregoing routine (see block 456). 

Each category of monitor has different types of institutes/web-site links, and 

30 therefore different requirements for populating the monitor. For example, in order to 
populate a Finance Monitor, a Bills Monitor, or a Credit Card Monitor, the user's private 
ID number and password must be sent to the selected financial institution's web-site in 
order to obtain the user's account information. However, links to a Weather Monitor or a 
Market Monitor can be selected from a public access web-site, with no need for 
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encryption of account information, user ID numbers, passwords and the like. For 
monitors that do not require password entry, the software routine of Figure 8 can be 
modified to eliminate the steps of ID and password processing, encryption, decryption, 
and storage. 

5 Figures 5A-5J present preferred embodiments of nine different types of GUI 

display screens for modifying monitors. For example, the GUI of Figure 5 A can be used 
for monitors that do not require password entry, such as weather and market monitors. 
Figure 5A demonstrates an option in which a list of cities that are already populating the 
weather monitor appear in column 404, while cities that populate other monitors of the 

10 user appear in column 416. The user can transfer cities into or out of the weather monitor 
simply by clicking the left and right buttons on bar 417. Likewise, the user can rearrange 
the position of a selected city simply by clicking the up and down buttons on bar 417. 
The user can delete a selected city simply by clicking on the delete button 418. The user 
can add a city by entering requested information in block 416 and then clicking the 

15 "Add" button 419. Menu 421 allows a users to add a new city to any available view pages 
20 by simply clicking boxes next to selected view pages 20. 

Once the user has populated the selected monitor 10, the information aggregation 
method of the invention retrieves the desired data from each of the institutes/web-sites 
that populate the monitor 10. If the data is already in the server's database (block 460), 

20 the system retrieves the data using the procedure set forth in blocks 468-496. The 
software retrieves the data 468 from the user account data store 472. The software 
decrypts the data 476 using a user data decryption key 480. The system retrieves the 
user's layout design 488, formats the data for presentation 484, and then populates the 
layout 492 on the user's display 1030. 

25 If data is not available for a particular institute/web-site (block 460), the system 

retrieves the data 464, in a manner described in Section G below. Additionally, if the user 
desires to update the data on a particular monitor 10, he or she clicks the refresh button 
500 and the system then retrieves updated data, in a manner described in Section G 
below. 

30 

F. Modify Passwords 

From time to time, a user's login ID and PIN/password for a particular 
institute/web-site may change. It then becomes necessary for the user to update his or her 
login information in the information aggregation system of the invention. Figure 9 is a 
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flow chart of one preferred embodiment of a routine for modifying a password. Upon 
receiving an input from a user to modify a monitor 400, the system displays the 
institutions/web-sites (accounts) that the user is enrolled for on the selected monitor 404. 
Figure 5B shows a preferred embodiment of the display of the accounts 404. Upon 

5 selection of a monitor 10 and receipt of an edit input by the user 800, the system prompts 
the user to enter a user ID 804, a PIN/password 808, and a PIN/password confirmation 
812. The system encrypts the user ID 816 and stores it in user ID database 820. The 
system also encrypts the PIN/password 824 and stores it in the PIN/password database 
828. If the user desires to set up or modify more passwords, the user repeats the foregoing 

10 steps (block 832). 

G. Get New Data From Institute/Web-Site 

Figure 10 is a flow chart of one preferred embodiment of a routine for getting data 
from an institute or web-site. Turning to Figure 8B, the routine of Figure 10 is initiated 

15 when data is not available for a particular institute/web-site (block 460). If data is not 
available, the system initiates the routine of Figure 10. The routine of Figure 10 may be 
initiated in various ways and at different times, e.g. upon initial login, at periodic 
intervals, upon population of monitor, or when the user selects "Refresh" 500. The 
system retrieves an institute/web-site name 504 from the user institute/web-site account 

20 database 5048. The system retrieves the user's account ID from database 520 and 
decrypts the user's ID 512 using an ID decryption key 516. The system further retrieves 
the user's PIN or password from database 528 and decrypts the PIN/password 520 using 
a PIN/password decryption key 524. The system retrieves the institute/web-site's script 
536 from institute script knowledge database 532. The system then executes a data 

25 aggregation routine such as a PDE routine 600. A preferred PDE routine is described 
below and in Figure 11. When the PDE routine 600 is complete, the system retrieves the 
data 540 from the institute/web-site. Similarly data could be aggregated with OFK, IFK, 
QIF, XML, or other data interchange standards or proprietary methods as illustrated in 
Figure 10. The system normalizes the data 544 (e.g. round off decimal places and 

30 otherwise place the data in a format acceptable for display on the view page 20). The 
system encrypts the data 548 using a user data encryption key 552. The system then 
stores the data 556 in the user's data store 472. Once the data for the institute or web-site 
is stored in the data store 472, the data can be retrieved by the system using the routine 
shown in blocks 468-492 of Figure 8. When retrieving non-confidential data (e.g. for the 
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weather monitor 10), the encryption and decryption steps can be eliminated. 
H. Programmatic Data Extraction (PDE) 

Figure 1 1 is a flow chart of one preferred embodiment of a routine for PDE. As 

5 mentioned above, PDE is a technique used in information aggregation systems to gather 
confidential data from web-sites. Referring back to Figure 10, the PDE function is 
initiated while gathering data from a web-site. At block 536 of Figure 11, the system 
obtains information about the institute/web-site (e.g. URL, login, and name of institute) 
from the institute script knowledge base 532. The system retrieves the user's account ID 

10 or user name from database 616 and decrypts the user's ID using an ID decryption key 
612. The system further retrieves the user's PIN or password from database 624 and 
decrypts the PIN/password using a PIN/password decryption key 620. The knowledge 
module then connects to the website from which data is to be collected 644. It then 
identifies the connection type supported by the website server 656. Some sites 

15 communicate using normal HTTP protocol while others use secure HTTP (HTTPS) using 
SSL encryption. If SSL encryption is to be used 660, the corresponding SSL certificate 
for the server is loaded 668 and a secure socket is opened by the knowledge module 676. 
While opening the secure socket, the knowledge module has to select the most 
appropriate encryption and decryption algorithms supported by the server 672. If the 

20 server supports normal HTTP communication, an ordinary socket connection is 
established between the knowledge module and the corresponding website server. The 
knowledge module transmits the login information to the website over the socket 
connection 680. The login session information and cookies etc. are accepted by the 
knowledge module 684. This session information and cookies are to be sent back to the 

25 server to access other resources (pages). 

The knowledge module accesses the HTML pages containing the required data 
using the session information and cookies over the socket connection 690. The response 
from the server is passed and the required data extracted 694. More pages are requested 
from the server if data has to be collected from them 696. When all the required data has 

30 been collected the data is encrypted using the encryption key for the user and is then 
stored in the database 708. 

I. Fast Login 

Figures 12A-B are flow charts for preferred routines for setting up and using the 
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fast login feature of the invention. Fast login is used to setup and access frequently visited 
websites with a click of a mouse button. Fast login can access sites that require a user 
name and password for access. The fast login feature allows the user to setup the website 
for fast login by entering the user name and password for the selected site. Once the 

5 website is set up for fast login, the user can click and go to the site any time without 
being asked to enter the user name and password. 

Figure 12A explains the process of setting up a web-site for fast access. The 
process is initiated when the user selects the "modify" option from the fast login drop- 
down list 802. A list of all the supported websites is read from the database 810 and 

10 displayed on the user's screen 806. The user navigates through the list and selects the 
desired website by clicking on the name of the site 814. If the site requires a user name 
and password to obtain access, the user is prompted to enter those details 826. When 
done, the user clicks the add button to add that website to his list of fast logins. If he 
cannot find the desired site in the list, he can manually add the site by entering the exact 

15 URL and site name 838. If the user wishes to add more websites 842, the above process 
is repeated. Once all the sites have been added, the user clicks the finish button 846. At 
that point all the newly added website details are stored in the database 848. 

Figure 12B is a flow chart for the process of accessing a fast login site. To go to a 
website for which the user has set up fast login, the user selects the site from the fast 

20 login drop down list 860. This list contains all the websites that have been set up for fast 
login by the user. A new browser window is opened with the required website loaded 
864. If the site requires a user name and password to login, the application will 
automatically submit this information from the database and login the user to the web- 
site. 

25 

J. Mobile Access 

Figures 13A-C are flow charts of the routines for setting up and accessing 
aggregated information using various wireless and handheld devices ("mobile devices"). 
The user has the option of selecting the information he wishes to access using each 
30 supported mobile device. When accessed through a mobile device, the data is formatted 
to fit the type of display on that device. 

Figure 13A is a flow chart for the process of setting up and modifying the mobile 
password. For security reasons, a separate password (i.e. different from the one that is 
used for web access) is preferably used for accessing the system from mobile devices. To 
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set or modify the mobile password, the user selects the "Mobile Password" option from 
the list of options available in the "options" drop-down menu 904. If the user already has 
a mobile password, the user is required to enter the user's existing mobile password for 
verification 908. If the user is setting up a mobile password for the first time, he enters 
5 his regular (i.e. non-mobile) password for the site. The user then enters the desired 
mobile access password and confirms by entering the password again 912. When done, 
the user clicks the "Update Password" button 916. The new password is stored 920 in the 
database 924. 

Figure 13B is a flow chart for a preferred routine for selecting the pieces of 

10 aggregated information to be seen on each type of mobile device. The process is initiated 
when the user selects the "Mobile Access" option from the "Options" drop-down list 928. 
A list of all aggregated accounts is displayed in the check boxes beside each of the 
supported mobile devices 932. If the user wishes to view an account in a particular 
device, he checks the corresponding box 936. This process is repeated for each available 

15 account. When all accounts have been set up, the user clicks the "Finish" button 940. At 
this point information about the accounts and the devices in which they are to be seen are 
stored 944 in the database 948. 

Figure 13C is a flow chart for the process of accessing the aggregated information 
using a mobile device. The information to be accessed through the mobile device is set up 

20 in the manner explained in the previous section. The process starts when the user invokes 
the application on a mobile device 952. The mobile device sends the server a request for 
the welcome page of the web server of the information aggregation system. The server 
recognizes the type of device from the request, and sends the corresponding welcome 
page 960. On the welcome page, the user is prompted to enter his user ID and the mobile 

25 password 904. The user ID and password entered by the user is validated 908. After 
validating the password or a list of accounts (information sources which are selected by 
the user to be accessed through the mobile device) is displayed 980. The user selects the 
information that he desires to view 984. Details about the selected account are displayed 
in a format that suits the mobile device 988. After viewing the information, the user logs 

30 out of the application 990. 

K. Additional and specialized Functions 

The foregoing description describes the basic components of the information 
aggregation system of the invention. The remainder of this application will focus on 
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additional details that can be incorporated into the invention. 
General Functions 
Login 

Before obtaining access to the information aggregation system, a customer is 
5 required to create a user profile through an enrollment or sign up procedure. Upon 
accessing the site of the host server, a customer is presented with a link to a sign up page. 
Upon clicking on the link, the user is presented with a page containing a user profile. The 
user is required to input information into the user profile, such as name, address, 
telephone, fax, email, secret question, etc. The information entered by the customer is 
10 authenticated and then stored in a user profile. The customer is given the option of 
selecting his own user-name and password. If a customer selects a user-name that has 
already been assigned to another customer, he is asked to select a new user name. He can 
also be shown a list of user-names to chose from. By selecting "Change Profile" from the 
options pull down menu 110 (Figure 2), the user can change his profile, including his 
15 password. 

Once a user is enrolled in the information aggregation system, he gets receives a 
view page 20 containing a default profile. The user can then customize the view page 20 
in the manner described above. Once the customer enrolls into the host site, he can login 
to his own personalized page 20 using his user-name and password. The first page of the 

20 host server's site provides an interface for logging into the site. Once the customer has 
successfully logged into the site, he can elect to change his password. If he forgets his 
password, information regarding the procedures to reset his password is preferably 
provided on the home page. Once the system administrator resets a customer's password, 
the customer is preferably required to change his password the next time he logs into the 

25 site. 

News Monitor 

This information is provided as part of the general profile. Users can customize 
this information to be part of the personal profile. The user can obtain the following 
30 headline information daily: 

• Current Events 

• Top Stories 

• Health Information 

• Business Information 
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• Kids News 

• Sports 

• General Quote Information 

Links are also available to other news sites. A customer can create various 
lifestyle monitors to link to sites of interest. Information may also be aggregated from the 
user's sites of interest. 

Weather Monitor 

General weather information is displayed on the view page 20 screen. The user 
can enter the name of city or zip code to obtain information specific to a particular 
location. A forecast for the week can be provided. The temperature can be displayed in 
degrees Fahrenheit as well as degrees C. Various customization options will be available 
to the customers through their personal profile. 

Customers can also obtain information about the entire country. They can obtain 
storm information and record temperatures over a period of time. This information can 
be displayed in formats which can be easily understood by the user. 

General Search utility 
A general search utility is provided. Here the user has options to use various 
search engines like AltaVista, Yahoo, and Lycos etc. The set of search engines available 
is customizable to offer search engines that are requested by the client group. 

General stock profile / Market Monitor 
A list of general stock quotes is displayed by default on the general profile screen. 
Once a user registers, he can personalize the information displayed so as to track stocks 
of interest to him. This also offers a link to his existing financial institutes for fast one 
click login for easy access to execute a trade. 

Advertisements 

Both banner advertisement as well as site link advertisement is available on this 
general information / start-up page. Also links to selected partners may be displayed at 
this level. 
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PERSONAL FUNCTIONS 

This section describes the ability to set personal preferences in a profile and also 
explains options available for selection. These options outline functions available through 
the information aggregation system for registered users. In addition, there is a section to 
5 allow users to send feedback regarding the site. This is helpful to enhance the existing 
functionality and address any problems users may encounter is using the system. 

Edit Personal Profile 

For registered users of the information aggregation system, a customization 
10 option is available to tailor the application to meet their needs. Under the personal profile 
the customer can create as many different views as desired to track combinations of 
information. The customer can have multiple views such as business, home, operations 
etc. The personalization screen provides a list of applications (monitors) to choose from. 
Based on the information needed, the user can add or delete an application from the 
15 profile. Once the applications to be used are chosen, clicking on the save button can save 
the changes. Once the selection is made, the user is able to design the page layout to 
place selected information in a desired location on the page. Once a view is developed 
and saved, the user is free to modify the view as he wishes. To do this he should choose 
the edit option. There is also a help screen, which is viewed by the customer. A log out 
20 option will also be present. The user is asked to enter account and password information 
to get to the information that only he has access to through those passwords. All user 
information is encrypted for privacy and protection. A user can also select what if any 
information he would like to deliver to his wireless devices, such as palm computers, 
cellular telephones, and pagers. 

25 

GROUPS/VALET ACCESS 

Users of the information aggregation system can also be allowed to create a group 
in order to share profile information. A group can be made up of members of the user's 
family for domestic purposes or members of an organization or project in a business 
30 environment. The reason for creating groups is to allow members of family or business 
organizations to share certain information. The group coordinator can also monitor 
information coming in and going out of each group. 
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Home, Personal or Domestic Coordination 

The customer can maintain family information in one place. This screen will 
display a list of all the monitors to be viewed. When the customer clicks on an entity he 
will obtain further details on the entity. He may also have access to execute commands 
and/or process additional information. This could be refresh information, or execute a 
transaction such as trade stocks, transfer funds, or pay bills. For multiple users in a 
household, a group can be created with different access levels. For example, parents have 
permission to view all information and children have restricted access. Or while parents 
are tracking their stock portfolio, their children can track sports information. 



Bill Payment and Utility Tracking and Monitoring 

The user can monitor various utility services such as electricity, gas, water, Cable 
TV, telephone, pager, and cellular phone. The information aggregation system makes it 
easy for the members of a household to maintain all their utility information in one place. 
15 All the utility bills can be tracked by the system. The bills can also be paid on line. 
Customer can monitor the status of home appliances with a click of a button. 

The utility option will have a billing section and a utilization section. Under the 
billing section there are two options for viewing bills and making payments. Under the 
utilization section there will be a graphical view and a tabular view of utilization and 
20 billing data history. 

Billing Section 

The customer can set his view page 20 to monitor his utility and other online bills. 
He is also able to track his payments and make payments for any of these bills directly 
25 from the information aggregation system over the web. The billing view will have a list 
of monitored services. When each service is selected, the required information will be 
displayed. This requires necessary interfaces to be provided by the various utility services 
through which the host server can query and get information and also make payments and 
other transactions. 



Utilization Section 

The customer can get daily/weekly/monthly reports on the usage of various 
utilities. The reports could be in a tabular form or as graphs or charts. The user can be 
provided with an option to choose the month or the number of days for information to be 
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viewed. >From the view page 20, the customer can track daily, weekly, monthly and 
annual usage of various services. The customer should be able to analyze the billing 
information, e.g. frequently called numbers or water usage in summer. Each month when 
the utilization is viewed, frequently used numbers could be displayed at one corner of the 
screen. Customers should be able to track money spent on phone bills over a month or 
year. The page may link to useful information, such as the best deal in long distance and 
international calling plans. Similarly, cellular calling can be analyzed or electricity usage 
patterns can be developed. 

Bank and Credit Card Accounts 

The customer can track various bank and credit card accounts from the view page 
20. The latest information about the various accounts can be displayed in a summary 
window. Customers can personalize the page by selecting various options to see 
outstanding balances and deposits etc. To configure this option the customer needs to 
enter various bank and credit card information along with password and access 
information. The customer can view the balance in each of his account along with the 
transactions in each account. This will help the customer to keep track of expenditures 
over a monthly and annual basis. This will also save customers the trouble of going to 
each individual financial institute site to get information. 

Similarly, the customer's credit card accounts can be viewed in summary and 
detailed view. The consumer can make any bill payments and fond transfers from various 
accounts from a single place in the information aggregation system. 

Portfolio Management 

The information aggregation system of the invention allows the customer to 
monitor and manage his financial portfolios from a single place. The information 
aggregation system of the invention differs from existing web-based portfolio 
management systems in at least two ways: 

a) It allows monitoring of information from many different accounts in 
one place, without requiring the user to enter particular security information 
manually for each site; and 

b) Customers can maintain all their shares directly from the information 
aggregation system of the invention without having to go to their individual 
broker's page. Information and passwords for a customer's brokerage 
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accounts are stored as part of the customer profile. When the customer elects 
to execute a transaction, the information aggregation system of the invention 
automatically logs in to the respective broker's server to execute the 
transaction. 

5 The customer can personalize the page so as to group the stocks in the manner in 

which the customer would like to view them, e.g. all Internet stocks in one group, all 
financial stocks in another, etc. Another way of grouping could be based on the brokers, 
i.e. all stocks from one broker in one group and all stocks from another broker in another 
group. Mutual funds holdings can also be tracked by the user. A user should also able to 
10 configure different groups of stocks that he does not hold in an account, but which he 
would like to monitor, i.e. hypothetical portfolios. Another advanced feature would be to 
track the growth of stocks over a period of time and view it graphically. The user can set 
limits on stock prices to trigger an alert or a page when price fluctuations occur. The user 
will be able to create family and group profiles as well. 

15 

Integrated Mailbox: Email /Voicemail/Fax 

Most customers have multiple email accounts. The email feature in the 
information aggregation system of the invention will provide a single interface through 
which they can access all their mails from the various email accounts. This will include 

20 all their POP accounts as well as other Internet-based email services like Hotmail and 
Yahoo. In addition to the external email accounts that can be configured in the 
information aggregation system of the invention, the customer also preferably receives a 
host server email account by default. 

When the user enrolls, a default email profile will be set for the information 

25 aggregation system. The user can then add all the other email accounts to this profile. 
Thereafter the user can see all the mails coming to the various accounts setup in the 
user's profile in the in box. The user will be able to add, delete or modify email accounts 
from the profile at any time. The information aggregation system of the invention allows 
users to maintain family and group accounts, i.e. all the general mails coming to a family 

30 or group can be obtained here. Restrictions can be placed on access to each group. 

Other common features of email services like filtering, sorting, and creating 
different folders etc. may also be provided by the host server. Emails can be 
automatically forwarded to specified folders according to the customer's preferences. The 
customers can also set up automatic email responders. With a unified messaging 



-25- 



platform, fax and voice mail may also be integrated to work like the email system 
described above. 

Home Appliances Monitoring 

5 As more and more home appliances become 'smart' and report their status 

through wireless services or through Internet interfaces, the user will be able to control 
and track the status of the various home appliances over the Internet through the 
information aggregation system of the invention. With the invention of tiny web servers, 
and connectivity through many networks, the 4 smart home' concept may finally become a 

10 reality. The following list provides some of the devices that could be monitored and 
controlled: 

• Air-Conditioner 

• Heater 

• Swimming Pool system 
15 • Washer 

• Dryer 

• Dishwasher 

• Kitchen Appliances (oven, refrigerator, etc.) 

There will be an option to choose the device (from the ones listed). Then the 
20 customer can choose to manage or view detailed information. Preferred options include: 

• Turn the devices on or off. 

• Set temperature. 

• Program device operation. 

Air-Conditioners / Heaters can be switched on/off and temperatures can be 
25 set via the web. For example before leaving the office, the customer could switch 

on a heater at his house and set it to a desired temperature so that by the time he 
gets home the rooms/pool would be at the desired temperature level. This feature 
would promote conservation of energy. 

If the view detailed information option is chosen, the system displays additional 
30 information. The customer will see the daily/weekly/monthly reports on the usage of the 
various appliances and various settings like temperature. The report could be in a tabular 
form or a graphs or charts. The customer has the option to see the reports in one or more 
of these types. The charts/graphs etc could be created and shown using applets. 
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Home Security Monitoring and Control 

Customers can setup their information aggregation system to monitor their home 
security system. Depending on the available information from the home security system, 
various pieces of information will be displayed by the information aggregation system of 

5 the invention. The main display will contain a list of devices or zones and their current 
status. If video monitoring is available there will be video feed to actually display activity 
from a selected zone. Some of the devices such as Alarm Status System, Intercom and 
Gate Security can be integrated. The functionality of some of the devices is as follows: 

Intercom- this allows for monitoring of infants and elders at home. This can also 

10 be used for door or gate release. 

Alarm System - can be used for both internal and external protection. One of the 
internal alarm systems is the smoke alarm system. In the event of a smoke alarm, the 
device can send out the message to the information aggregation system server and the 
customer can be notified via their preferred emergency notification method. Some of the 

15 functions that could be performed on the security systems through the information 
aggregation system of the invention include: 

• Monitoring the status of the security system (Armed/Disarmed) 

• Arm or disarm the system directly over the Internet from the information 
aggregation system service. 

20 • In the event of security alarms, the information could be transmitted to the 

information aggregation system server and then the customers could be 
notified automatically through pager, cellular etc. or any other method 
specified by the customer. 

25 Vehicle Tracking and Monitoring 

Through the information aggregation system of the invention, a customer can track 
movement of vehicles driven by members of the client's household or by employees. The 
movement of the vehicle can be tracked over a period of time. The route taken by the 
vehicle can be displayed on a map. The information obtained can be used for different 

30 purposes, such as tracking the location of children using the family vehicle or tracking 
missing vehicles. This information would be useful in emergency situations (e.g. a car 
accident or a stolen vehicle). The value of this information could be enhanced by keeping 
a history of travel, driving habits, auto related transaction tracking, etc. 

A summary page may display the following information for each of the vehicles 
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owned by the customers: 

• Vehicle Name 

• Vehicle license number 

• Vehicle ID number 

5 • ID of the tracking device placed in the vehicle. 

• Current location of the vehicle 

• Current status of the vehicle 

A detailed view can map the location of the vehicle. The distance covered during 
the travel can also be viewed. If the vehicle has the ability to report details on its 
10 performance (e.g. engine statistics diagnostics, information etc.) they can be displayed 
here. There could also be a device mounted in the vehicle that can send a help request in 
case of an emergency. Depending on the nature of the information and user preference, 
such information may be relayed to other services. This may allow the auto manufacturer 
or repair shop to offer better service and price and develop loyalty programs. This could 
15 help with insurance ratings etc. 

A user could also be allowed to monitor information such as 

• Expenditures on vehicle maintenance 

• Next service date for an oil change or engine tune up or other maintenance. 

• Daily fluid level and air pressure of the car. 

20 • Track car loan installment payment and schedules. 

• Track auto insurance coverage and renewals. 

The information obtained can be displayed in a graph or in a table format. 

Personal Travel Services and Monitoring and Rewards Programs 
25 Currently there are many sites that offer very competitive travel booking and 

ticket purchasing services. They offer many features with offers for best prices or best 
schedules etc. The information aggregation system does not try to duplicate these 
services. The information aggregation system of the invention will offer added 
convenience to an individual traveler. The status of the flight travel can be monitored if a 
30 reservation is made online or flight information is entered into the system. Once the 
travel plan is entered in the system, the information aggregation system of the invention 
will monitor arrival and departure times for the flight, and notify the user of any change 
in the schedule. 

Similarly, if a user wishes to monitor the price change for a given flight schedule, 
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the information aggregation system will monitor the available price and update the user 
as to any price change. The information aggregation system can book a flight through one 
of the sites that offer online reservation, if desired. The information aggregation system 
of the invention will provide links to popular travel sites like Travelocity and Expedia. 
5 The information aggregation system of the invention will allow the users to 

monitor all their frequent flyer programs information in one place. Just like the stock 
portfolio or bank account monitoring, customers can specify their account information 
and passwords, and the information aggregation system of the invention will gather 
necessary information. Users can maintain all their frequent flyer/hotel etc. programs in 
10 one place and request services from them as appropriate from the information 
aggregation system of the invention. 

Calendar (Personal Information Manager) 
A calendar is provided by the information aggregation system on which the 

15 customer can maintain family schedules and set reminders for all-important information. 
The system also provides updating of the calendar from the existing calendar systems. 
The entire family schedules can be updated on one calendar so as to identify any conflicts 
in schedules. For business or group calendar, all the entries of the group can be merged 
in one calendar so that conflicts can be resolved while scheduling meetings. 

20 The customer can view his daily, weekly or monthly calendar. He can also view 

the entire group or family calendar. Tasks to be done can be listed on the main display if 
desired. 

The customer can synchronize his personal organizers and other schedulers such 
that any changes made in one place can be reflected in the other scheduler. If he makes a 

25 modification at home and he makes another entry at work in a different scheduler, the 
information aggregation system of the invention can show both entries and help 
synchronize both or display both. If the customer decides to have a meeting or party then 
he can send emails directly from the calendar. The calendar will also notify the customer 
(if the reminder is set on in the calendar) on the pager, phone or by e-mail of important 

30 appointments. 

The first screen in this application may be a login screen or sign up for new users. 
The general services available to the customer are displayed here. Once the user has 
logged on, he is allowed to create a personal profile or a group profile. 

In a group profile the members of the group may have different access levels. The 
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project leader will have permissions to view the schedules of the group members, and 
will also be allowed to create or schedule meetings and add or delete members. The 
members can view the group and individual calendar but can only update their personal 
information. Once a meeting is scheduled, a user has an option to send out an e-mail to 
5 all the people who need to attend it. The screen can display a 'to do list' on one side of 
the screen. A reminder can be set on to notify the members of the group of a meeting. To 
create or schedule a meeting, the user is guided through a menu of the necessary 
information such as: 

• All the employees to choose from 
10 • An option to add or delete entries 

• An option to set the date and time 

• An option to set reminder 

• An option to send e-mail to all the attendees. 

There will also be an option to create a group, such that instead of choosing the 
15 individual names and adding them to the list of attendees, the group name can be 
selected. If there is a general lecture or meeting, the calendar for many groups could be 
updated. There could be another screen which will display the event information. This 
page can be personalized to display the events that need to be tracked. A list of events 
will be provided. The user will also be allowed to set reminders for important events. In a 
20 personal profile, the access permission can be applied based on the head of the family. 
The children could have a lower access level. 

Package Tracking 

The information aggregation system customers are allowed to track incoming as 
25 well as out going packages. The customer can obtain information regardless of who the 
package carrier is (i.e. FedEx, UPS, etc.). The customer can also obtain information 
regarding the rates of all the different cargo systems. Customers will also be able to 
locate the offices nearest to them. One of the screens will display information of the area 
covered by the carrier. This information can be presented in a map format. The user is 
30 allowed to enter the zip code from where a package starts, and in response the system 
displays the number of days it will take the package to reach its destination and the cost 
of various shipping options. The customer can enter the tracking number and the carrier. 
Once these values are entered, the status of the package will be displayed. This feature 
can be used for both domestic and business purposes. 
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Video Feed 

Customers may receive a video feed from a camera, which they have paced at a 
location that they would like to monitor. For example, customers can monitor what their 

5 kids are doing while they are at work by placing a camera in the kids' room and sending 
in video feed from the camera directly to the information aggregation system service. 
They can then view the video live over the Internet in the information aggregation system 
display. This feature can also be used to monitor the activities of a baby-sitter while they 
are away at work. It can also be used to monitor movement around the house and 

10 apartments for security purposes. This kind of video feed can also come from day care 
centers and schools. If one parent is unable to attend a child's functions (e.g. a dance 
performance or soccer game), the other parent can send a live video feed from the 
function. 

15 BUSINESS FUNCTIONS 

The information aggregation system of the invention can be used to extend the 
concept of corporate and business portals. The focus in not so much on how data is 
entered in various corporate systems, but on how various data and information systems 
are pulled together so that the user receives the data she needs where she wants it, e.g. on 

20 a desktop or palm computer. In the corporate embodiment, the information aggregation 
system of the invention serves as an office worker or knowledge worker dashboard. A 
single password and account on a corporate information aggregation system based portal 
lets the user receive what she wants from all corporate systems (e.g. personal data from 
HR system; manufacturing statistics from a production line). The user can also maintain 

25 group information. The group concept will allow for collaboration and extension of 
knowledge throughout an organization. On a simple level, a group can be seen as 
collection of users with different access levels. In a hierarchical organization, the 
manager and group head may have permission to view all information while project 
members may have restricted permissions. 

30 Several corporate portal providers have evolved in recent years that look at 

various corporate data and information and bring it together for the user. Most 
applications providers with ERP, SCM, CRM and data warehousing are offering options 
to view some level of data through web-based browsers. However a user now has to go to 
many sources and must login with many systems in order to get what she needs to 
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complete her job. This is frustrating and hurts worker productivity. 

The information aggregation system of the invention offers an integrated view of 
many diverse portals and systems inside a corporate firewall. The system also includes 
the ability to perform a single sign-in function, such that the user only needs one 

5 password to go to all systems within the corporation or on the web. The information 
aggregation system of the invention also allows the user to bring key personal data into 
the business world to provide a single view of important information for monitoring and 
control of both personal and business domains. 

In this set-up the information aggregation system of the invention is the 

10 technology that gets integrated inside the IT managed environment to quickly offer 
features and functions that are similar to those offered on the personal side for corporate 
users. From integrated reporting from various systems to single account management, the 
user gets the necessary information delivered to her as needed. 

15 Special Applications 

The information aggregation system of the invention allows users to monitor and 
track commercial applications on the web. Some of these applications are described 
below. 

20 Logistics Management 

The customer is provided with a few easy ways of managing the information 
obtained from different sources. Organizations that are involved in transportation of 
goods can use this application to obtain information and track the movement of the cargo. 
The goods can be transported via truck, trailers, or railcar. A Mobil tracking device is 

25 mounted on the trucks. This can keep track of all the information /movement of the truck. 

The information aggregation system can track the movement of trucks. The route 
traveled by the truck can be displayed on a map. The system can also track: the period of 
time for which the vehicle has been stationary or in movement; gas consumption of the 
truck over a week, month and year; and maintenance of the truck over a month or week. 

30 The information obtained can be displayed for the use of the people at the 

company or base station. The user can be provided with a few different views, such as 
group view and personal view. Different users of the company may want to view their 
information in different formats, hence the personal view option. The group views can be 
based on area or the cargo being carried. 
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The customer can configure the vehicle information. The information need to 

configure may include: 

• Name 

• Description 

• Type 

• Capacity 

• Owner 

• Address 

• Radio equipped 

• Radio type 

• Radio ID 

• Radio address 

• Radio serial number 

• Start and End point 

The view will have a set of tables displaying information. One table will display 
the daily delivery and pickup information, such as: 

• Customer name 

• Contact person 

• Date and time 

• Delivery or pickup 

• Contents 

• Trailer name 

Another table will track the movement of the trailer. Here the user is provided 
with two views: tables views and map view. The table view will display the following 
information: 

• Trailer identification information 

• Last location 

• Date and time 

• Status (mobile or stationary) 

• Previous location 

• Date and time 

• Status 

The movement of the truck can be displayed on a map. The map will have 
capabilities of zooming in and zooming out. The user can view the last and current status 
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/ location of the trucks or trailers. There will be another table which has a "to do" list of 
all tasks that need to be accomplished. The system can also provide a chart with 
information regarding the speed of the vehicle over a period of time (day, month and 
year). This chart will display the maximum speed and average speed of the vehicle. It 
will also display the miles traveled per gallon. The utilization and expenditure can be 
displayed in tabular column or as a graph. Customers can also obtain a list of the office 
locations and contact information. 

Order Tracking System 
The information aggregation system makes order tracking easy for customers. As 
more and more services and goods are purchased on line, on line suppliers are providing 
on line information about the status of orders. See e.g. www.onsale.com. The information 
aggregation system functions as a central control center where the user can track all of his 
orders from the view page 20, so that the user does not have to go to various sites to 
gather that information. Next level of functionality will be for the order tracking system 
to integrate with back office systems for inventory management and billing and payment 
services. Some of the information provided could include: 

• Supplier name and address 

• Order ID 

• Order Date and time 

• Status (oh hold, shipped, in transit, delivered) 

• All the orders in last month 

• All the orders from a given supplier 

• Payment history 

Customer Service System 

The information aggregation system of the invention can also provide personal 
information about where the customer does business. From time to time, users will have 
customer service requests for many of their service providers. It is often very difficult to 
locate a customer service contact, whether by telephone, letter, or e-mail. The 
information aggregation system can simplify this process by offering all of this 
information in one place. The system goes beyond offering information about where to 
go for customer service, and becomes a customer service center from the user's point of 
view. Today's order tracking and customer service systems are designed from the point 
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of view of service providers for them to track transactions. The information aggregation 
system changes this paradigm by offering a customer service center for users that tracks 
all of a user's customer service requests and keeps him updated on the status or progress 
of his given request. Some of the information provided could be: 
5 • Supplier name, address, phone number, online CSR address 

• Customer service request number or order number 

• Date and time 

• Status (on hold, rma issued, credit issued, in process, resolved, send more 
info) 

10 • All the complaints in last month 

• All the issues for a given supplier 

• Service history 



Health Care Monitoring 

15 The information aggregation system makes it easy to monitor patient information 

(e.g. heart rate, patient history etc.) from remote locations. In a home environment, this 
feature can be used to monitor the elderly and ill. Doctors can view all medical records of 
patients on line. Doctors can prescribe medicine for treatment, and can look up drug 
references and side effects. Doctors can also hear dictated notes. Dictated notes can be 

20 converted to text and be available to doctors as documents. The system can page nurses 
and doctors to notify them of any critical condition. Over a period of time the medical 
record or medical history of the patient can also be obtained online. Restrictions will be 
provided as to who can view the patient's information. Tips about health care can be 
posted at regular intervals for the awareness of the general public. After returning home 

25 from the hospital or a doctor's appointment, patients can log on to review information 
regarding their health. This utility can be used for new admissions, patient registration 
and critical care information. The first screen will display the patient's personal 
information, such as: 

• First Name 
30 • Last Name 

• Social Security Number 
MRN 

• Age 

• Address 
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• DOB 

• Gender 

• Insurance number 

• Doctor name 

5 For first time patients, all requested information will have to be entered. For 

returning patients, the patient's information can be automatically displayed once the 
name and Social Security Number have been entered. Personal information can be 
modified as needed. Previous medical records at the hospital can be displayed on one side 
of the screen. If the previous hospital chart number is obtained, then the previous medical 
10 records can be obtained. 

The current patient information can be viewed on-line by both doctors and 
authorized family members. The information is provided in two view: a general profile 
and a detailed profile. 

To access the information, both doctors and patient's relatives enter an access 
15 code. In the general profile, the following information can be obtained 

Patient's Name 
Current status 
Last medication taken 
Next medication due at - 
20 • Doctors name 

Pager number 

Along with all this information, general health tips can be provided to individuals 
accessing this page. 

The detail profile will have in-depth information regarding the status of the 
25 patient, such as: 

Doctor name 

Nurse in charge and pager number 
Patients name 
Heart rate 

30 • Blood Pressure 

Temperature 
Blood sugar 
Current medication 
Next checkup 



-36- 



• Daily report - which will contain procedure report , test results etc 

• Status of the patient 

Every time a patient comes in for a regular visit the following information will be 
needed: 

• Patients name 

• MRN - medical record number 

• Doctors name 

• Date/time 

• Reason for visit 

• Insurance number 

• Doctors report - this will contain the diagnosis or problems 

• Previous Medication 

• Place where prescription is filled 

• Follow ups 

• Blood Pressure 

• Allergies 

• Tests if any 

• Prescription 

With the help of the MRN, the patient's past medical history can be obtained. 
Under Medical History, the following information will be displayed 

• Tests Conducted and results 

• Medication of the patient 

• Allergies 

• Current status 

• Procedures conducted if any 

• Discharge summary if any 

There will also be a billing section. The billing information will be as follows: 

• Name of the patient 

• Name of the doctor 

• Date of visit or service obtained form the doctor 

• Co-pay 

• Services billed for 

• Blood test 

• Any procedures 
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• Data on lab information, such as the test conducted and the results for each 
test. 

Fuel Monitoring 

5 Customers can manage oil wells from the interface of the information aggregation 

system of the invention. The first screen will display the location of all oil wells and 
storage areas. To obtain the information of a specific oil well or storage area, the 
customer will enter a new screen. The screen will display the oil level in the well as well 
as in the storage area. Users will be allowed to personalize the page to display the 

10 information they want to see. In case of an emergency, an alarm could be sounded by the 
system and interested persons can be notified by phone or beeper. 

Various types of data and information can be displayed, including: the amount of 
oil being obtained from the well over a period of time; the price of oil over a period of 
time could be calculated; all the customers of the company; sales to each company; total 

15 turn over of the company; stock price quotes of the company. Customers can also view 
some general information, such as: 

• Customers can track the level of fuel in the tankers. This information can be 
used to keep track of the next refill. 

• Customers can also check the amount of fuel that can be downloaded at the 
20 next station. Once the fuel level falls below the required level, an automatic 

reminder is sent to the customer. 

Equipment management 

A customer can use the information aggregation system to track the status of 
25 equipment, such as office equipment or vehicles. This feature will allow both the 
customer and the service organization to monitor and service the equipment. The 
equipment has embedded controllers and communication devices. These devices cannot 
only monitor their own status, but can also provide information regarding any repair or 
services needed. All these devices will have a display on the systems, which will display 
30 the information. The customer and the equipment manufacturer can view the information 
on a screen on the information aggregation system. For example, the status of printers, 
fax machines and scanners can be displayed. 

Each vehicle will have a screen to display the status of the vehicle, including 
information such as: 



-38- 



• next oil change due 

• next vehicle tune up 

• air pressure in the wheels 

• Diagnostics - this will diagnose the electrical, mechanical etc. problems in the 
5 automobile and list them out. 

Manufacturers will be able to obtain functional information of each and every 
vehicle in the market. The information will be in a tabular or graphical view. In both 
views the required information could be obtained by clicking on the automobile type and 
manufacture date. There could be a filter to display the common reoccurring problems in 
10 each make. All the information obtained could be used by the company to enhance the 
performance of new vehicles coming into the market. The information could also be used 
for timely servicing of the automobiles. A screen would be displayed asking the 
following information: 

• Vehicle ID 
15 • Make 

• Year 

• Name of owner 

Once this information is punched in, all recorded details about the vehicle can be 
obtained. This will save both the customer and the service organization a lot of time. 
20 In case of emergency, the automobile can automatically notify the user and any 

emergency contact. The manufacturer can also view general information of all the parts 
in the vehicle. The usage and durability of the manufactured product could also be 
evaluated. 

One of the screens will display a list of all office equipment available to be 
25 monitored. In the transportation industry the screen will display a list off all the vehicles. 
When each of the links is clicked, a page will be displayed which will have all the 
functional information of the product along with the problems if any. The screen will 
preferably list: 

• Product ID (for office equipment's) and vehicle ID (for automobiles). 
30 • Date of purchase 

• Sales 

• Automobiles will display the miles traveled since the date of purchase. 

• Problems in the system so far (categorized as sever or not) 

• The utilization can be displayed in a table or graph. 
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• A list of repairs needed on the product. 

• Next service due. 

• Level of all the engine fluids in the automobile. 

An option can be provided for adding new sales to the existing system. There will 
5 be a new screen to add new product. All the information will need to be updated from 
time to time. The information entered will preferably be as follows: 

• Product ID 

• Name of customer 

• Address 

!0 • Information - device mounted to give feed back 

There should also be a contact number displayed on the screen to contact the 
vendor if necessary. This page can also display general tips to maintain and operate the 
automobile or office equipment. 

15 E-mail 

E-mail for business purposes is similar to e-mail for personal purposes (discussed 
above), except that the project lead will have maximum access permissions. The team 
members will have a restricted access level. All the general mails can be forwarded to all 
the group members. The project lead can also keep track of the number of mails coming 
20 in and going out of a particular account. 

On Line Shopping 

The information aggregation system makes on line shopping easy for customers 
of the business. Customers are allowed to enter the name of the product or choose from a 

25 list of preferences. Once this is done, a list of all related products and their prices will be 
displayed. Another section will give the customer a list of auction and bargain sites. 
Information about all latest sales can be obtained here. Customers no longer need to 
search in different sites for the best price. The first page will display different shopping 
categories, such as the following: 

30 • Home Appliances 

• Cloths 

• Electronic gadgets 

• Kitchen ware 

• Home and garden 



-40- 



• Sports 

• Flowers 

• Vehicles 

• Books 

5 • Computers 

• Art 

• Gifts 

• Food and Drinks 

• Collectibles 
10 • Health 

• Office equipment 

• Personal Care 

• Online drug store 

This page will also have a general search engine. The search will be based on 

15 category and a product in the chosen category. The sales and auction information can also 
be displayed on this screen. Users will have the option of personalizing this view. 
Adding or deleting items from the list can modify the personalized view. Once a user 
successfully logs in, the view selected by the user will be displayed. There could also be 
an option where the user's e-mail ID is entered in order to receive sale information or 

20 auctions. The customer will be given the option of requesting a catalog. 

When the user clicks on a selected category, a new page will be displaying having 
a subset of products in that category. There will also be a search utility for the specific 
category. Each of the screens would have added banners to promote some products. 
Once the specific sub category is chosen, a third screen appears. This screen will have an 

25 option to specify the price range of the product that the user is interested in buying. Once 
this is done, a list of all devices in this range will be displayed. The desired product can 
be placed in a shopping cart. The user can then chose either to buy the product or 
continue shopping. If the buy option is chosen, the user is taken in to a screen to enter 
information to buy the product. If the continue option is chosen, then the user is allowed 

30 to continue shopping. 

Fast Access/Single Sign-on 

The information aggregation system of the invention makes it easy for customers 
to obtain on line access to many web-sites. As discussed above, when a user populates a 
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monitor 10 with a particular institution/web-site, the customer enters the customer's ID, 
password, and other requisite information for the selected site. The information 
aggregation system stores this login information and uses it to log into the selected site on 
behalf of the customer, using the procedures described above (Figure 12). Thus, the 

5 system serves as a functional database of all of the user's login information for a 
multitude of web-sites. Once the user is logged into the information aggregation system, 
the user can rely on the information aggregation system to login to the user's web-sites, 
eliminating the need to remember or look up account IDs and PIN/passwords. Using the 
foregoing capabilities, the system can provide a list of "favorites" that is available to 

10 users whenever they login to the information aggregation system. From this one place, a 
user can go to any selected site without having to enter a name and password for the site. 
Functions can also be provided whereby the system serves to hide the true identity of the 
user from the selected web-site. 

Using this technique, the system can be adapted to work as a single sign-on 

15 system for any web based applications. Corporations can use the single login feature to 
offer internal users access to various applications that normally require entry of different 
user IDs and passwords. Single sign-on can be used by financial institutions to provide 
access to a multitude of services from different vendors with different user IDs and 
passwords using a single sign-on user ID and password. 

20 

L. Secure Selective Sharing of Account Information 
The present invention is a system for providing and allowing selective sharing of 
account information among users of an Internet information aggregation system. The 
sharing system of the invention is preferably used in conjunction with the Internet 
25 information aggregation system embodiments described in Sections A-K, above. 
However, the sharing system of the invention can be used with any Internet account 
aggregation system that shares information with multiple users. 

The invention allows users to create a plurality of view pages 20 and selectively 
share these views with other users of the system. For example, a user of the system can 
30 create the following views: (1) a public view 20 that displays news, lifestyle items, stock 
quotes and other non-sensitive information; (2) a private view 20 that displays sensitive 
information such as bank accounts, brokerage accounts, insurance, rewards programs, e- 
mail, and travel information; (3) an advisor view 20 that displays selected account 
information, such as financial account information, travel account information, 
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automotive history, or medical history information, for purpose of receiving and 
exchanging information with an advisor, such as a financial advisor, travel agent, 
mechanic, or physician. 

For purposes of clarity in the following description, the user who is granting or 
5 assigning access to his or her view pages will be referred to as a "grantor." A user who 
has been granted access privileges by a grantor will be referred to as a "grantee" As will 
become clear from the following description, each user of the system can be both a 
grantor and a grantee, depending on the circumstances. For example, if user A assigns 
Visitation Access privileges to users B and C, user A is a "grantor" to users B and C, 
10 while users B and C are "grantee" of user A. If user B assigns Visitation Access 
privileges only to user A, user B is a "grantor" to user A, while user A is a "grantee" of 
user B. However, unless user B assigns Visitation Access privileges to user C, user B is 
not a grantor to user C, and likewise user C is not a grantee of user B. 

Using a GUI such as the preferred embodiment shown in Figure 14, the host user 
15 can selectively grant or revoke Visitation Access using the account information sharing 
system of the invention. Access to the grantor's view pages 20 is granted solely by the 
grantor; the grantee does not have to do anything in order to obtain access, other than 
provide the user with the grantor's Visitation Access Code. Visitation Access Codes are 
assigned to the users by the Internet information aggregation system (or by the party that 
20 administers the system). The Visitation Access Codes are stored in the system's user 
profile database. Visitation Access Codes are unrelated to user login criteria (i.e. user IDs 
and passwords), so that users do not have to reveal their login criteria to one another in 
order to share information via the account information sharing system of the invention. 
The use of Visitation Access Codes also eliminates the need for the grantor to create a 
25 password for each of his grantees. A grantee simply logs onto the system using his own 
user ID and password. When the grantee pulls up his view page 20, he is presented with 
an option for viewing the view pages 20 of grantors who have granted Visitation Access 
to the grantee. The grantee can then select a grantor's view page 20. Selection of the 
grantor's view page 20 is preferably made in the same manner in which the grantee 
30 selects from among his own view pages 20. Once the grantee has selected a grantor's 
view page 20, the grantor's view page 20 is displayed on the grantee's display. 

The Internet information aggregation system can be configured such that only 
certain users have the right to participate in Visitation Access. For example, users can be 
required to pay an additional fee in order to receive a Visitation Access Code and 
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participate in Visitation Access. 

Figure 15 is a high level flow chart for one embodiment of a method which 
implements the account information sharing system of the invention. Figure 15A presents 
an overview of the method. The flow chart documents six primary functions: Create 
5 Views (Figure 15B); Grant Access (Figure 15C); Revoke Visitation Access (Figure 15D); 
Review Views (Figure 15E); Mobile Visitation Access (Figure 15F); and Secure 
Messaging (Figure 15G). These functions are described in turn below. 
1. Create Views 
The grantor creates views 20 in the manner described with particularity in 

10 Sections C-F above. Figure 15B provides a high level diagram of the basic functions 
entailed in creating and modifying view pages 20, With the grantor logged onto the 
Internet information aggregation system 2104, the grantor can enter input for editing a 
view page 2108. The grantor can assign a name to the view page 2112. The grantor can 
select monitors to be added to the view page 2116. The grantor can also select a color 

15 scheme for the view page 2120. When the grantor is finished setting up the view page 
2124, the grantor can elect to change the view page as desired 2128. The grantor can also 
store a new or revised view page 2132. In this manner, the grantor creates one or more 
view pages 20. Once the view pages 20 have been created, the grantor can elect to share 
his view pages 20, in the manner described below. 

20 2. Grant Visitation 

Blocks 2200-2268 of Figure 15C describe one preferred embodiment of a 
software routine for granting or assigning access to grantees. When a grantor desires to 
grant access to the grantor's accounts, the grantor activates the routine of Figure 15 by 
selecting the Visitation Access feature from one of the user's view pages 20, such as 

25 through an Options pull down menu 110 (see Figure 2). Upon receiving input from the 
grantor for granting Visitation Access, the software preferably checks to verify that the 
grantor is authorized to grant Visitation Access 2204. As indicated in block 2208, if the 
user is not authorized to grant visitation, the software does not permit the user to grant 
visitation. In a preferred embodiment, the software is configured such that a user who 

30 does not have the right to grant Visitation Access is not presented with the option for 
granting visitation. 

As indicated in block 2212, if the user is authorized to grant access, the grantor is 
permitted to proceed through the procedure for granting Visitation Access. The grantor is 
presented with a GUI for granting Visitation Access, such as the preferred embodiment 
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shown in Figure 14. As indicated in block 2216, the grantor enters the Visitation Access 
Code of a selected grantee. As mentioned above, the system assigns a Visitation Access 
Code to each user who has Visitation Access privileges. Upon receiving input for the 
grantee's Visitation Access Code, the routine determines whether the grantor has entered 
a correct Visitation Access Code 2220. If the grantor enters an incorrect Visitation 
Access Code, the routine displays an error message 2224 and/or prompts the grantor to 
reenter the Visitation Access Code. If the grantor enters a correct Visitation Access Code 
for a selected grantee, the routine displays a list of the grantor's existing views 2228. 
Every user of the Internet information aggregation system is assigned a unique Visitation 
Access Code. The assignment of the user's unique Visitation Access Code is preferably 
made during the enrollment process. The user's Visitation Access Code is part of the 
user's personal profile information and is stored on a database of the Internet information 
aggregation system. In a preferred embodiment, a user's Visitation Access Code can be 
changed by the user if desired. 

As show in Figure 15C, a grantor can preferably assign visitation access rights to 
a grantor in two ways. Access can be granted either at the view level whereby the grantor 
selects the views 20 to be given access to and sets the necessary permissions for the 
grantee. In this mode the grantee has access to all the information aggregated in the 
particular view(s) 20 to which he has been granted access. Alternatively, access can be 
granted on an individual account level. In this case, the grantee gets access only to those 
particular accounts for which he is given permission by the grantor. Depending on the 
mode selected for granting access 2222, a list of all the grantor's available views 2228, or 
a list of all the grantor's available accounts, is displayed 2230. Using the list, the grantor 
selects the views or accounts to which the grantee will be granted access. 

As shown in Figure 14, in a preferred embodiment of the invention the user can 
selectively assign one of three levels of access to a given view: (1) Read Access 2234 - 
the grantee can view the information displayed on the user's view page, but cannot 
manipulate the information or otherwise alter the view page; (2) Refresh Access 2244 -- 
in addition to being able to view the information on the view page, the grantee can 
refresh the information; or (3) Full Access 2256 - allows the grantee to exercise certain 
privileges of the user, such as entering secured web-sites (in a preferred embodiment, a 
Full Access grantee cannot modify the view pages of the grantor). Figure 15C shows a 
preferred routine for granting Visitation Access at the various levels of access. If the 
grantor inputs a grant of Read Access 2232 for one of the grantor's views, the routine sets 
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a yes flag 2240 for Read Access for that particular view. If the grantor does not input a 
grant of Read Access 2232 for a particular view, the routine sets a no flag 2244 for Read 
Access for that view. If the grantor inputs a grant of Refresh Access 2244 for one of the 
grantor's views, the routine sets a yes flag 2248 for Refresh Access for that particular 
5 view. If the grantor does not input a grant of Refresh Access 2244 for a particular view, 
the routine sets a no flag 2252 for Refresh Access for that view. Likewise, if the grantor 
inputs a grant of Full Access 2256 for one of the grantor's views, the routine sets a yes 
flag 2260 for Full Access for that particular view. If the grantor does not input a grant of 
Full Access 2256 for a particular view, the routine sets a no flag 2264 for Full Access for 
10 that view. Once the grantor has assigned access to selected view pages 20, the grantor 
inputs an instruction to set up the system to allow access by the grantee 2264, such as via 
the update link 2264 shown in Figure 14. The routine then sets up the system, 
incorporating set up parameters from database 2268. 

3. Revoke Visitation 

15 The grantor is also provided with the option of selectively revoking Visitation 

Access privileges. In the preferred GUI of Figure 14, the grantor is presented with a link 
2300 for deleting or revoking access to a selected grantee (i.e. revoking Visitation 
Access). As shown in Figure 15D, to revoke Visitation Access to a grantee, the grantor 
invokes the page for setting up visitation access 2312 (see Figure 14). A list of all the 

20 grantees to whom the grantor has granted visitation access and their respective access 
rights are displayed 2316. Selecting 2324 and deleting the grantee 2328 can revoke the 
rights of a grantee. If visitation rights are revoked in this manner and the grantor later 
wishes to restore access to the deleted grantee, the setup process must be repeated for the 
grantee by entering that particular grantee's Visitation Access Code (see 2216 in Figure 

25 14). Alternately, revoking specific rights for that grantee can temporarily revoke the 
visitation rights of a grantee 2340. For example, if the grantee is not granted basic read 
access to the grantor's views, then he/she no longer has any visitation access to the 
information. If the grantor later wishes to re-assign the privileges to the grantee, those 
revoked permissions can be activated again. The grantor can also revoke particular rights 

30 such as refresh or full-access for a particular grantee. 

4. Review Views 

Once the grantor has granted Visitation Access to a grantee in the foregoing 
manner, the grantee can view the grantor's view pages 20 such as by the preferred 
routines shown in blocks 2400-2510 (Figure 15E). In order to view the grantor's view 
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pages 20, the grantee first logs onto the Internet information aggregation system in the 
manner described above. Once the grantee is logged onto the system, he is presented with 
his default view page 20 (see Figure 2). As shown in Figure 15B, the software initially 
determines whether the grantee has the right to participate in the Visitation Access 

5 function of the system 2404. If the grantee does not have the right to participate in 
Visitation Access, the grantee is not presented with an option for doing so (block 2408). 

If the grantee has the right to participate in Visitation Access, the grantee's view 
page 20 presents the grantee with an option for doing so. In a preferred embodiment, the 
Visitation Access view pages are displayed along with the grantee's personal view pages 

10 in a pull down menu 103 (see Figure 2). As indicated in block 2412, the software 
composes and presents the available view pages by retrieving the grantee's views 20 
from a database of available user's views 2416 and by retrieving Visitation Access views 
from a database of available Visitation Access views 2420. At block 2424, the software 
receives input for selection of a Visitation Access view page. If the grantee does not 

15 select a Visitation Access view page, the software retrieves, composes, and presents one 
of the grantee's views (blocks 2428, 2412). If the grantee selects one of a grantor's 
Visitation Access view pages 20, the software composes a Visitation Access view page 
20 for the selected view. In composing the Visitation Access view page 20, the software 
retrieves the grantor's view from the Visitation Access view store database 2438, the 

20 grantor's decryption and encryption keys from the grantor decryption and encryption 
keys database 2442, the grantee's decryption and encryption keys from the grantee 
decryption and encryption keys database 2446, and the grantor's Visitation Access 
permissions from the grantor permissions database 2450. 

The software then checks to determine whether the grantee has been granted Read 

25 Access, Refresh Access, or Full Access. As shown in block 2454, in a preferred 
embodiment, the software first determines whether the grantee has been granted Read 
Access. If the grantee has been granted Read Access, the software pulls the selected 
grantor's view 20 from the view layouts database 2462 and then formats and displays the 
selected grantor's view 20 on the grantee's display 2458. If visitation access has been 

30 granted only for certain accounts of the grantor rather than veiws 20, the system 
automatically creates a view 20 for the grantee. The automatically created view includes 
all of the grantor's accounts for which access has been granted to the grantee. 

If the grantee has not been limited only to Read Access, the software then 
determines whether the grantee has been granted Refresh Access 2466. If the grantee has 
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been granted Refresh Access, the software pulls the selected grantor's view from the 
view layouts database 2462 and then formats and displays the selected grantor's view on 
the grantee's display 2470. As indicated in block 2474, the software additionally allows 
the grantee to enter input for selectively refreshing the information on the grantor's 
selected view page 20. If the grantee selects refresh, the software refreshes 2478 the 
information on the grantor's selected view page 20, in the manner described above. If the 
grantee does not select refresh, the system continues to display the grantor's selected 
view page 20 on the grantee's display until such time as the grantee selects a new view 
page or logs out of the system 2510. 

In a preferred embodiment shown in Figure 15E, if the grantee has not been 
limited only to Read Access or Refresh Access, the software defaults to a Full Access 
mode 2481. The software pulls the selected grantor's view 20from the view layouts 
database 2462 and then formats and displays the selected grantor's view page 20 on the 
grantee's display 2482. As indicated in block 2486, the software allows the grantee to 
enter input for selectively refreshing the information on the grantor's selected view page 
20. If the grantee selects refresh, the software refreshes 2490 the information on the 
user's selected view page 20, in the manner described above (see Section G). The 
software also allows the grantee to enter input for carrying out various functions 2494. In 
a preferred embodiment, the grantee is allowed to carry out transactions as if he were the 
grantor 2498, login to selected web-sites as though he were the grantor 2502, and modify 
the grantor's account information as though he were the grantor 2506. The system 
continues to display the grantor's selected view page 20 on the grantee's display until 
such time as the grantee selects a new view page or logs out of the system 2510. 
5. Mobile Visitation Access 
Grantees who have access to their aggregated information through various mobile 
devices (see Section J, above) can also setup and view Visitation Access through those 
mobile devices. Figure 15F is a preferred embodiment of a process for setting up and 
viewing Visitation Access through mobile devices. In order to view grantor's 
information through mobile devices, a grantee first sets up the information that he/she 
wishes to access through each particular type of mobile device. The grantee logs in to the 
aggregation web site 2502 and invokes the mobile access setup page 2504. A list of all 
grantors who have granted Visitation Access to the grantee, along with the available 
information for each grantor, is displayed 2506. The grantee then selects the information 
and the mobile devices in which he wishes to see the selected information 2508. Upon 
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confirming the operation 2510, the grantee's choices are stored to the mobile access 
database. Once the information is setup to be viewed on mobile devices, the grantee can 
access the shared information from a mobile device by logging into his aggregation 
account using his username and mobile access password 2552. After login the grantee 
5 selects the visitation option and a list of all his grantors are listed 2554. In order to view 
the information of a particular grantor, the grantee selects that grantor from the list 2556. 
The information is then read from the aggregation database and displayed on the mobile 
device 2558. 

6. Secure Messaging 

10 Secure messaging is a tool that allows Visitation Access grantees and grantors to 

securely communicate with one another. All currently available Internet Messaging 
services do not have sufficient security features. When a message is being relayed over 
the Internet, a hacker can view the message without being detected. The present 
invention provides a secure method for Information aggregation system users to 

15 communicate securely with one another. For example, if a user (grantor) grants visitation 
access rights to his financial account information to another user who is his financial 
advisor (grantee), the secure messaging feature can be used to discuss important matters 
relating to the grantor's financial accounts. 

In order to send a secure message to a user in a visitation access group, the sender 

20 of the message logs in to his Internet information aggregation system 2604. The sender 
then invokes the secure messaging tool 2608. Messages that were sent to the sender by 
his grantees and grantors while the sender was offline ("offline messages") are securely 
stored in the system's secure messaging database 2660. To ensure security of these stored 
offline messages, they are encrypted before being stored in the database. When the 

25 secure messaging tool is accessed, all messages that were sent to the sender while he was 
offline are retrieved from the secure messaging database and displayed 2616, preferably 
in a list format. After reading an offline message, the sender can selectively delete the 
message from the secure messaging database. To delete messages, the sender first selects 
messages from the list of offline messages 2624. When the user confirms the delete 

30 operation, the selected messages are deleted from the secure messaging database 2628. 
To send a message, the sender composes a message 2640 and selects a recipient or 
recipients for the message from his list of grantors and grantees 2644. Upon confirmation 
of the send operation 2648, the message is delivered to the recipient grantor/grantee in an 
encrypted format. If the recipient of the message happens to be logged into the Internet 
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information aggregation system, the message is instantly displayed to the recipient 2656. 
If both the sender and recipient of the message are logged in to the system at the same 
time, they can proceed to exchange messages in real-time. The message is transmitted 
from the sender's machine to the aggregation system servers and then to the recipient's 

5 machine in an encrypted format. Upon reaching the recipient's machine, the message is 
decrypted for viewing. If the recipient is not logged in to the Internet information 
aggregation system at that time the message is sent, then the message is encrypted and 
stored in the secure messaging database as an offline message. The offline messages will 
be displayed to the recipient when he logs in 2616. The users can also selectively set 

10 various priorities on the messages and, depending on the urgency level of the message, 
the messages can be forwarded to the grantee recipient's mobile devices. 

The secure messaging system of the invention differs significantly from 
conventional e-mail. With conventional e-mail, a message and its envelope are 
transmitted from a sender to the recipient via the Internet. During transmission, the em- 

15 mail message can be intercepted and viewed by a hacker. Once a conventional e-mail 
message reaches the recipient's processor, the e-mail message is stored on the hard drive 
of the recipient's processor, typically in an "in box" file, until the message is permanently 
deleted. A hacker can access the e-mail message on the recipient's processor. In the 
secure messaging system of the present invention, the secure messages remain stored 

20 only in the system's secure messaging database. The secure messages are transmitted to 
a recipient's processor ion an encrypted format for viewing purposes, in the same manner 
as recipient's personal account information is transmitted to a grantee. The recipient is 
simply being allowed to view a secure message rather than, for example, the grantor's 
view page 20 or grantor's personal information from a web-site. Because the secure 

25 messages are transmitted to recipients in an encrypted format and remain stored only on 
the system's secure messaging database, it is virtually impossible for hackers to access 
the secure messages. 

Although the present invention has been described in terms of specific 
embodiments, it is anticipated that alterations and modifications thereof will no doubt 
30 become apparent to those skilled in the art. It is therefore intended that the following 
claims be interpreted as covering all alterations and modifications that fall within the true 
spirit and scope of the invention. 
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